Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/d_KXUTnYx9uObOAmK-MLj4TSdVY.roa
File: d_KXUTnYx9uObOAmK-MLj4TSdVY.roa (raw, json)
Hash identifier: eNmzT+Jy4AnZJg2DIhMiyzAjmxNLK02WYpFy4wmXIPs=
Subject key identifier: 77:F2:97:51:39:D8:C7:DB:8E:6C:E0:26:2B:E3:0B:8F:84:D2:75:56
Certificate issuer: /CN=897378126f55d96519553daa48e02e3282121644
Certificate serial: 018CC2DACFEECF5010A2BBC8C13CA9B0768F
Authority key identifier: 89:73:78:12:6F:55:D9:65:19:55:3D:AA:48:E0:2E:32:82:12:16:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXN4Em9V2WUZVT2qSOAuMoISFkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/d_KXUTnYx9uObOAmK-MLj4TSdVY.roa
Signing time: Mon 01 Jan 2024 02:29:29 +0000
ROA not before: Mon 01 Jan 2024 02:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29479
IP address blocks: 185.83.0.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXN4Em9V2WUZVT2qSOAuMoISFkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Jun 2024 20:47:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:cf:ee:cf:50:10:a2:bb:c8:c1:3c:a9:b0:76:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=897378126f55d96519553daa48e02e3282121644
Validity
Not Before: Jan 1 02:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77f2975139d8c7db8e6ce0262be30b8f84d27556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:91:05:82:30:4f:b7:0b:cc:97:f4:73:0a:fa:
f2:d8:cf:90:c2:8f:68:fa:e5:89:83:13:59:b9:8a:
75:00:20:ba:6d:2e:a6:9b:48:5b:37:51:4a:4c:6c:
5c:39:69:59:b7:81:de:d4:67:d2:87:f2:0b:58:ba:
7e:8d:7e:7c:c9:d0:cb:17:bc:04:d4:f2:f9:b0:6e:
fa:2c:c6:eb:79:3f:27:a3:59:66:30:75:f9:57:5a:
ca:52:a1:72:76:98:27:d6:72:d3:49:b7:1d:83:34:
9c:7e:e3:85:a7:50:41:33:27:06:38:42:40:4d:36:
8e:c6:74:1c:1b:49:fa:8c:ab:9b:cd:85:24:55:a1:
f8:c3:67:d7:f9:ca:2c:84:86:7c:40:0d:25:b2:25:
ff:23:04:bb:f0:1a:29:43:ae:4e:69:d3:2c:3a:76:
bf:f8:f6:1f:a2:e1:e2:f1:67:19:3a:d4:5f:5e:2b:
a3:c1:a8:23:72:e0:8b:bf:d3:b0:ec:e3:d3:c1:dc:
ce:b5:c3:6c:6d:0b:3b:69:7e:c9:77:b6:3e:48:50:
e6:ba:58:ae:31:13:5d:3f:cb:93:b2:75:76:76:ac:
e2:32:b5:50:f8:4d:37:dd:3d:cb:61:42:43:fb:af:
df:64:f0:41:3b:93:00:2b:68:7f:4f:0c:e5:25:18:
7e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F2:97:51:39:D8:C7:DB:8E:6C:E0:26:2B:E3:0B:8F:84:D2:75:56
X509v3 Authority Key Identifier:
keyid:89:73:78:12:6F:55:D9:65:19:55:3D:AA:48:E0:2E:32:82:12:16:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXN4Em9V2WUZVT2qSOAuMoISFkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/d_KXUTnYx9uObOAmK-MLj4TSdVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.0.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:0c:41:d0:1f:20:45:c0:b7:a0:93:a6:42:f8:11:a5:67:b6:
ad:d1:2b:e4:b4:a8:a9:80:e8:0f:4c:72:c2:b9:a8:5e:b5:82:
dc:4c:73:47:91:5b:94:59:8f:91:1d:9b:9a:ab:c2:a2:8a:1f:
2b:09:64:1d:27:58:8f:fb:b6:b4:e7:55:72:c0:ab:da:72:5f:
f1:ee:91:6d:26:b1:fe:ab:7f:6b:fa:ef:92:20:62:e0:19:fa:
4c:4f:78:c5:d6:79:db:eb:8b:3e:7a:ef:9f:b4:cc:01:d7:e9:
c5:95:66:7e:81:f1:37:f6:bc:34:a7:7d:c3:f6:fc:23:34:ac:
af:e1:e3:0d:fb:10:26:e9:fe:e9:8f:14:10:cb:6f:b6:5a:e0:
a7:9a:fa:84:7f:89:38:f5:42:c1:ec:af:d4:56:15:a1:e2:17:
31:ea:19:3a:f8:02:56:f9:5f:f8:4c:64:5a:5e:61:98:fb:ec:
b2:7c:fd:cf:b9:91:be:0f:93:6d:0e:d4:88:2a:fe:cc:7e:ad:
2c:ca:67:26:6b:b3:49:ac:5e:4e:b2:9f:d2:74:75:37:f1:0f:
f3:5a:b9:2d:19:cf:75:0a:40:31:6e:95:36:7a:e2:77:15:c8:
ef:a2:cc:8f:dc:22:d4:15:a8:0c:8e:24:3a:53:6e:98:02:de:
71:f8:62:f4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC2s/uz1AQorvIwTypsHaPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5NzM3ODEyNmY1NWQ5NjUxOTU1M2RhYTQ4ZTAyZTMyODIx
MjE2NDQwHhcNMjQwMTAxMDIyOTI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3N2YyOTc1MTM5ZDhjN2RiOGU2Y2UwMjYyYmUzMGI4Zjg0ZDI3NTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5EFgjBPtwvMl/RzCvry2M+Qwo9o
+uWJgxNZuYp1ACC6bS6mm0hbN1FKTGxcOWlZt4He1GfSh/ILWLp+jX58ydDLF7wE
1PL5sG76LMbreT8no1lmMHX5V1rKUqFydpgn1nLTSbcdgzScfuOFp1BBMycGOEJA
TTaOxnQcG0n6jKubzYUkVaH4w2fX+coshIZ8QA0lsiX/IwS78BopQ65OadMsOna/
+PYfouHi8WcZOtRfXiujwagjcuCLv9Ow7OPTwdzOtcNsbQs7aX7Jd7Y+SFDmuliu
MRNdP8uTsnV2dqziMrVQ+E033T3LYUJD+6/fZPBBO5MAK2h/TwzlJRh+ZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHfyl1E52MfbjmzgJivjC4+E0nVWMB8GA1UdIwQY
MBaAFIlzeBJvVdllGVU9qkjgLjKCEhZEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVhONEVtOVYyV1VaVlQycVNPQXVNb0lTRmtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mMmQwY2ItYzNkNC00OWJlLWIwZjIt
MzA1ZmIwOTU1NmM5LzEvZF9LWFVUbll4OXVPYk9BbUstTUxqNFRTZFZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9mMmQwY2ItYzNkNC00OWJlLWIwZjItMzA1ZmIwOTU1NmM5
LzEvaVhONEVtOVYyV1VaVlQycVNPQXVNb0lTRmtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVMAMA0G
CSqGSIb3DQEBCwUAA4IBAQANDEHQHyBFwLegk6ZC+BGlZ7at0SvktKipgOgPTHLC
uahetYLcTHNHkVuUWY+RHZuaq8Kiih8rCWQdJ1iP+7a051VywKvacl/x7pFtJrH+
q39r+u+SIGLgGfpMT3jF1nnb64s+eu+ftMwB1+nFlWZ+gfE39rw0p33D9vwjNKyv
4eMN+xAm6f7pjxQQy2+2WuCnmvqEf4k49ULB7K/UVhWh4hcx6hk6+AJW+V/4TGRa
XmGY++yyfP3PuZG+D5NtDtSIKv7Mfq0symcma7NJrF5Osp/SdHU38Q/zWrktGc91
CkAxbpU2euJ3FcjvosyP3CLUFagMjiQ6U26YAt5x+GL0
-----END CERTIFICATE-----
Generated at Fri Jun 28 01:58:10 2024 by rpki-client on console-fra.rpki-client.org